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Description 

[0001] This invention relates to a method for author- 
izing a creditydebit card holder to purchase goods or 
services. ^ 
[0002] In recent years, telephone ordering of mer- 
chandise has become an increasingly common method 
of purchase. In a typical transaction, a caller calls a 
store, indicates the merchandise that is to be bought, 
provides his/her address for the delivery of the merchan- 
dise. and provides a credit/debit card (CDC) number 
The vendor verifies that the CDC Is valid and charges 
the purchase to that CDC. The vendor then sends the 
merchandise to the customer. A problem of this method 
of operation is that the customer must provide his/her ^5 
CDC number to the vendor This tends to compromise 
the secrecy of the CDC number which makes possible 
the fraudulent use of such a number The possibility of 
such fraudulent use helps to keep the rates charged by 
credit card companies to the vendors high, and limits 20 
teletransaction usage. 

[0003] EP-A-0 501 697 discloses a method according 
to the preamble of claim 1. 

[0004] In the method disclosed in EP-A-0 501 697, a 
customer is connected to a vendor, and the customer 25 
and the vendor discuss the proposed transaction and 
come to an agreement on the price. The agreed price, 
and identification of the customer, are passed to a credit 
card data base which decides whether the transaction 
can be authorised. Since the authorisation process is 30 
carried out on an agreed price, this method is relatively 
inflexible - if the customer should decide to purchase 
additional goods, or higher range goods, it is necessary 
to repeat the authorisation process. 
[0005] The present invention provides a method of 35 
authorising a purchase of goods or services as claimed 
in claim 1. 

[0006] In accordance with applicant's invention, an 
advance is made over the methods of the prior art by 
connecting a customer desiring to order merchandise to ^0 
the data base of a CDC company or to its authorised 
agent such as a common carrier; the caller then pro- 
vides the CDC number to the data base, which after 
checking the authorisation of the CDC number, provides 
an authorisation indication to a vendor The vendor ^5 
charges the credit card company for the purchase using 
the authorisation code. Advantageously, the credit card 
number is only provided to the credit card company or 
carrier, not to the vendor 

[0007] According to the present invention, the author- 50 
isation indication that Is transmitted from the data base 
to the vendor includes a limit of allowed expenditure for 
a transaction. It is therefore possible for the customer to 
change his order without the need to obtain fresh au- 
thorisation (provided, of course, that the changes do not 55 
exceed the limit of allowed expenditure). 
[0008] In accordance with one feature of the inven- 
tion, identification methods are used to identify the caller 
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and only provide authorisation for the purchase (trans- 
action) if the caller is the owner of the CDC. In one spe- 
cific embodiment of the invention, the caller is identified 
using voice recognition. Alternatively, or in addition, a 
personal identification number is used. Alternatively, or 
in addition, the caller is identified using automatic 
number identification (ANI) which is forwarded to the 
card company or agent as part of the caller identification. 
[0009] In accordance with one feature of the inven- 
tion, the authorisation code contains one or more addi- 
tional fields. One such field is used to identify the vendor 
and thereby simplify the process of billing for the credit 
company. Another field provides the name and/or ad- 
dress of the credit card holder to reduce the effort of the 
vendor for obtaining this data. Another field specifies a 
limit of the time for which such credit is being allowed. 
Another field specifies the date and time of the authori- 
zation. 

Brief Description of the Drawing 
[0010] 

FIG. 1 is a block diagram illustrating the operation 
of applicant's invention; and 
FIG. 2 is a flow diagram of the steps of a method 
for implementing the invention. 

Detailed Description 

[0011] FIG. 1 is a block diagram of the operation of 
applicant's invention. A purchaser at a calling station 1 
is connected via a telecommunications network 2, such 
as the public switched telephone network, to a credit/ 
debit card (CDC) data base 5. The calling station pro- 
vides to the data base 5 a CDC number, a personal iden- 
tification number (PIN), and a sample of the caller's 
voice. The sample is routed to caller verification system 
7 which is used to recognize the voice and to ensure 
that the recognized voice corresponds to the specified 
credit/debit card. The caller is then provided with new 
dial tone and calls the vendor 3. The telephone number 
of the vendor is passed from network 2 to CDC data 
base 5 using signaling network 4. The identity of the ven- 
dor is the final piece of data required by the CDC data 
base to provide the authorization code. This authoriza- 
tion code is passed from CDC data base 5 via signaling 
network 4 and network 2 to vendor 3. In one specific 
implementation of applicant's invention, the authoriza- 
tion number is provided over a D-channel of an integrat- 
ed services digital network (ISDN) link to the vendor Al- 
ternatively, this information may be provided using other 
signaling techniques such as dual tone multifrequency 
(DTMF) signaling. 

[001 2] After the vendor has received the authorization 
code, the vendor is connected to the calling station and 
receives verbal instructions from the calling station. 
These verbal instructions, such as for merchandise to 
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be ordered, are associated with the received authoriza- 
tion number and the vendor then transmits via network 
2 and signaling network 4, the authorization code plus 
merchandise and charge information to the CDC data 
base 5 to charge the customer appropriately. The 5 
charge is valid only if the authorization code and the ven- 
dor identification correspond and any restrictions such 
as dollar limit and time limit are satisfied. The CDC com- 
pany 6 is connected via the network and optionally via 
a data link to the CDC data base to allow the data base 
to be updated, for example, when a credit card is found 
to have been lost. 

[0013] The authorization includes an authorization 
code specifing the dollar limit of the amount of credit be- 
ing authorized for this transaction. ^5 
[0014] In accordance with one feature of the inven- 
tion, the authorization code contains one or more addi- 
tional fields. One such field is used to identify the vendor 
and thereby simplify the process of billing for the credit 
company. Another field provides the name and/or ad- 20 
dress of the credit card holder to reduce the effort of the 
vendor for obtaining this data. Another field specifies a 
limit of the time for which such credit is being allowed. 
Another field specifies the date and time of the authori- 
zation. 25 
[001 5] FIG. 2 is a flow diagram of steps performed to 
practice applicant's invention. Initially, block 200, a CDC 
holder (CDCH) wants to make a teletransaction. Block 
201 and its succeeding blocks illustrate a method 
wherein the CDCH initially calls the data base of a card 30 
company or its agent. Block 203 illustrates that the card 
company requests the card number, and a PIN or a 
voice sample, and validates the card and its user, this 
request may not be necessary if the caller's telephone 
station has been identified by an Automatic Number 35 
Identification (ANI) number forwarded to the data base, 
and matching the recorded telephone number for that 
CDC. The data base verifies the authorization of the 
CDC holder to incur the expense and prepares an au- 
thorization code for transmission to the vendor If the 40 
CDCH is so authorized, the CDCH is then given a new 
dial tone and calls the vendor (block 205). Block 207 
indicates that the CDCH orders the products/services 
from the vendor who has been automatically provided 
with the authorization code. Eventually, the CDCH dis- ^5 
connects (block 209) and the vendor charges against 
the card using the authorization code (block 211) if the 
transaction has been authorized and the time and dollar 
values are not exceeded. This can be performed either 
by the vendor filling out a credit ticket or by the vendor so 
providing information which is immediately sent back as 
a data message to the CDC data base. 
[0016] An alternate approach is illustrated in block 
24 1 and its successors. Here the CDCH calls the vendor 
directly (action block 24 1 ). The vendor connects the CD- 55 
CH to the card validator data base and the card valida- 
tion is performed in a transaction between the calling 
station 1 and CDC data base 5. The transfer of calling 



station 1 to CDC data base 5 is performed by setting up 
a connection between the CDCH and the data base in 
such a way that it is impossible for the vendor to eaves- 
drop on this connection. The card is validated by the 
card validator using the card number, the PIN, and/or, if 
appropriate, voice recognition (action block 243). The 
CDCH is then returned to the vendor who is provided 
with an authorization code from the data base (action 
block 245). The CDCH then orders the products and the 
service against the authorization code received by the 
vendor (action block 247) and the CDCH eventually 
hangs up (action block 249). The vendor charges 
against the CDC using the authorization code (action 
block 251). 

[0017] Note that in both of these scenarios the credit/ 
debit card number is not provided to the vendor who only 
receives the authorization code. 
[0018] In another alternative arrangement, when a 
customer has selected his/her merchandise or service, 
the customer is connected to the CDC data base from 
a convenient station, possibly including a card reader, 
located in the vendor's store. After the CDC number has 
been entered and the transaction authorized, the au- 
thorization code is provided audibly or in video or printed 
form for the vendor, at the convenient station or at an 
associated terminal. 

[0019] It is to be understood that the above descrip- 
tion is only of one preferred embodiment of the inven- 
tion. Numerous other arrangements may be devised by 
one skilled in the art without departing from the scope 
of the invention. The invention is thus limited only as 
defined in the accompanying claims. 



Claims 

1. A method of authorising a purchase of goods or 
services, comprising: responsive to receiving in a 
data base for authorising a credit/debit card (CDC) 
expenditure data from a holder (1 ) identifying a spe- 
cific CDC, determining whether their CDC is author- 
ised to incur an expenditure; and 

responsive to a determination that said CDC 
is authorised to incur said expenditure, transmitting 
from said data base (5) an authorisation indication 
to a vendor (3) of said goods or services, the iden- 
tification of said CDC not being derivable from said 
authorisation code whereby the identification of 
said CDC is not provided to said vendor; 
the method being characterised in that said author- 
isation indication comprises an authorisation code 
for tracking a purchase transaction, the authorisa- 
tion code comprising a limit of allowed expenditure 
for a transaction. 

2. A method as claimed in claim 1 wherein said au- 
thorisation code further comprises one or more of 
the following: an identification of said vendor, date 
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and/or time data, a time limitation for a transaction, 
the name of a holder of said CDC. and an address 
of a holder of said CDC. 

3. A method as claimed in claim 1 , 2 wherein said data 
received in said data base comprises data for veri- 
fying the identity of the user of said CDC. 

4. A method as claimed in claim 3 wherein said data 
for verifying comprises a personal identification 
number. 

5. A method as claimed in claim 3 or 4 wherein said 
data for verifying comprises an automatic number 
identification of a caller station supplying said CDC 
identification, 

6. A method as claimed in any preceding claim com- 
prising the steps of; 

establishing a voice connection to voice recog- 
nition means for recognising the identity of a 
caller; and 

using output of said voice recognition means to 
identify a user of said CDC. 



Patentanspruche 

1. Verfahren zum Authentifizieren eines Kaufs von 
Handelsgutern oder DIenstleistungen, umfassend: 

in Antwort auf ein Empfangen, in einer Daten- 
bank zum Authentifizieren einer Kredit-ZDebit- 
karte (CDC)-Ausgabe, von Daten von einem In- 
haber (1 ), die eine spezifische CDC identifizie- 
ren, ein Bestimmen, ob ihre CDC authentifiziert 
ist. eine Ausgabe zu tatigen; und 
in Antwort auf eine Bestimmung, dafi die CDC 
authentifiziert ist, die Ausgabe zu tatigen, ein 
Ubertragen eines Authentifizierungsvermerks 
von der Datenbank (5) zu einem Verkaufer (3) 
der Handelsguteroder DIenstleistungen, wobei 
die Identifizierung der CDC von dem Authenti- 
fizierungscode nicht ableitbar ist, wodurch die 
Identifizierung der CDC dem Verkaufer nicht 
bereitgestellt wird; wobei das Verfahren da- 
durch gekennzeichnet ist, dafi der Authentift- 
zierungsvermerk einen Authentifizierungscode 
zum Verfolgen einer Kauftransaktion umfafit, 
wobei der Authentifizierungscode eine Begren- 
zung der zugelassenen Ausgaben fur eine 
Transaktion umfaflt. 

2. Verfahren nach Anspruch 1, wobei der Authentifi- 
zierungscode weiter eines oder mehreres von dem 
Fotgenden umfafit: eine Identifizierung des Verkau- 
fers, ein Datum und/oder Zeitdaten, eine Zeitbe- 



grenzung fur eine Transaktion, den Namen eines 
Inhabers der CDC und eine Adresse eines Inhabers 
der CDC. 

5 3. Verfahren nach Anspruch 1 , 2, wobei die in der Da- 
tenbank empfangenen Daten Daten zum Verifizie- 
ren der Identitat des Benutzers der CDC umfassen. 

4. Verfahren nach Anspruch 3, wobei die Daten zum 
10 Verifizieren eine personliche Identifikationsnummer 

umfassen. 

5. Verfahren nach Anspruch 3 oder 4, wobei die Daten 
zum Verifizieren eine automatische Nummerniden- 

^5 tifikation einer Anrufstation, die die CDC-ldentifika- 
tion liefert, umfassen. 

6. Verfahren nach einem voranstehenden Anspruch, 
umfassend die Schritte: 

20 

Einrichten einer Sprachverbindung zu einer 
Spracherkcnnungseinrichtung zum Erkennen 
der Identitat eines Anrufers; und 
Verwenden einer Ausgabe der Spracherken- 
25 nungseinrichtung, urn einen Benutzer der CDC 

zu identiftzieren. 

Revendications 

30 

1. Proc6d6 d'autorisation d'un achat de biens ou de 
services, comprenant: 

en r6ponse a la reception, dans une base de 
35 donn6es pour autoriser une depense par carte 

de cr6dit/debit (CDC), de donnees en prove- 
nance d'un detenteur (1) identifiant une CDC 
sp6cifique, determination de si oui ou non sa 
CDC est autorisee a supporter une d§pense; et 

40 

en r6ponse a une determination du fait que la- 
dite CDC est autorisee a supporter ladite de- 
pense, Emission depuis ladite base de donnees 
(5) d*une indication d'autorisation pour un ven- 
45 deur (3) desdits biens ou services, I'identifica- 

tion de ladite CDC ne pouvant pas etre d6riv6e 
^ partir dudit code d'autorisation de telle sorte 
que I'identification de ladite CDC ne soit pas 
fournie audit vendeur, 

50 

le procede etant caracterise en ce que ladite 
indication d'autorisation comprend un code 
d'autorisation pour suivre une transaction 
d'achat, le code d'autorisation comprenant une 
55 linnite de depense accord6e pour une transac- 

tion. 

2. Proc6de selon la revendication 1, dans lequel ledit 
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code d'autorisation comprend en outre un ou plu- 
sieurs des 6l6ments qui suivent: une identification 
dudit vendeur, des donn6es de date et/ou d'heure, 
une limitation tennporelle pour une transaction, le 
nom d'un d6tenteur de ladite CDC et une adresse 5 
d'un d^tenteur de ladite CDC. 

3. Proc6d6 selon la revendication 1 ou 2, dans lequel 
lesdttes donn6es regues dans ladite base de don- 
n6es comprennent des donn6es pour verifier I'iden- 
tit6 de I'utilisateur de ladite CDC. 

4. Proc6d6 selon la revendication 3, dans lequel les- 
dites donn^es pour verifier comprennent un nume- 

ro d'identification personnel. ^5 

5. Proc6d§ selon la revendication 3 ou 4, dans lequel 
lesdites donn6es pour verifier comprennent une 
identification par num6ro automatique d'une station 
d'appelant qui applique ladite identification de CDC. 20 

6. Proced6 selon Tune quelconque des revendications 
pr6c6dentes, comprenant les 6tapes de: 

6tablissement d'une connexion vocale sur un 25 
moyen de reconnaissance vocale pour recon- 
naltre ridentit§ d'un appelant; et 

utilisation de la sortie dudit moyen de recon- 
naissance vocale pour identifier un utilisateur 30 
de ladite CDC. 
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FIG. 1 
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FIG. 2 
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